Network Security – Preventing Unauthorized IP Address Configuration

internetipip addressNetworkrouter

Here's the scenario. I was picturing a university that bought a range of IP addresses. I think their network would still be connected to an ISP (right?), but they'd have freedom to configure stuff the way they wanted.

What stops them from assigning to their routers and hosts already in-use IP addresses?

And what would happen if indeed someone did this?

Best Answer

Most likely if they're a big university they are their own ISP, using BGP to connect their network to the internet via a number of upstream networks.

Nothing stops them from using IP addresses they should not be using, and it would work in their local network. However, it won't work on the Internet. Their upstream networks providing them connectivity should have filters in place which would only allow the university to advertise IP addresses assigned to them. If the direct upstreams wouldn't filter them, the upstreams' upstreams will. And if IP addresses, which are in use by another network, would be used by the university, that other network would become unreachable from the university network.

In addition, there are a number of projects (for example, RIPE RIS and BGPmon) which monitor routing tables and alert on any "illegal" IP advertisement (BGP hijacks and routing anomalies).